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CAN  THE  NAVY’S  TENTH  FLEET  EFFECTIVELY  COMBAT  THE  CYBER  THREAT? 


When  war  has  been  accepted  as  necessary,  success  means  nothing 
short  of  victory;  and  victory  must  be  sought  by  offensive  measures... 

— Alfred  T.  Mahan1 

On  23  July  2009,  Admiral  Gary  Roughead,  U.S.  Navy  Chief  of  Naval  Operations 
(CNO),  directed  the  Navy  to  stand  up  its  newest  operational  command,  Tenth  Fleet, 
under  the  auspices  of  U.S.  Fleet  Cyber  Command.  Per  guidance  issued  by  the 
Secretary  of  Defense,  the  Navy  was  tasked  to  identify  and  provide  component  support 
to  the  newly  established  U.S.  Cyber  Command  no  later  than  1  October  2009. 2  As  such, 
the  CNO  directed  that  the  Director  of  Naval  Intelligence  lead  an  implementation  team 
and  develop  a  plan  for  Fleet  Cyber  Command  to  be  stood  up  as  the  Navy’s  Component 
Commander  to  U.S.  Cyber  Command  at  Ft  Meade,  MD.3  Additionally,  Tenth  Fleet  was 
to  be  reconstituted  and  serve  as  the  lead  for  Navy  operations  in  cyberspace.4  It  is  not 
unusual  for  a  military  service  to  stand  up  a  new  organization  during  a  time  of 
transformation  or  to  counter  a  growing  threat.  The  U.S.  Navy  is  no  exception  and  this 
marks  the  second  time  that  the  Navy  has  stood  up  the  Tenth  Fleet  to  address  a 
burgeoning  threat  to  national  security. 

Origins  of  Tenth  Fleet 

The  first  incidence  involving  Tenth  Fleet  took  place  in  the  Spring  of  1943,  when 
allied  shipping  was  facing  a  seemingly  insurmountable  threat  from  German  submarines, 
or  U-boats,  during  World  War  II.  Prior  to  this  time,  the  anti-submarine  effort  was 
decentralized  and  parceled  out  among  the  sea  frontiers,5  naval  districts,  fleet 
commanders,  as  well  as  divided  among  the  United  States,  the  United  Kingdom, 

Canada,  and  Brazil.6  The  threat  posed  by  German  submarines  was  so  significant  that 


during  the  Casablanca  Conference,  19  January  1943,  the  Combined  Chiefs  of  Staff 
(CCS),7  President  Roosevelt  and  Prime  Minister  Churchill  each  agreed  that  the  defeat 
of  the  U-boat  was  of  great  importance  and  needed  to  be  addressed.8  From  January  to 
March  of  1943,  losses  of  merchant  shipping  destroyed  by  U-boats  rose  steadily  to  a 
high  of  108  allied  ships,  which  corresponded  to  627,000  tons.9  On  30  April  1943,  the 
CCS  recommended  that  each  allied  nation  centralize  its  control  of  anti-submarine 
warfare  and  cooperate  closely  in  the  study  and  integration  of  the  anti-submarine  effort.10 
Thus,  on  1  May  1943,  Admiral  Ernest  King  assumed  control  of  the  disparate  U.S.  anti¬ 
submarine  effort  during  World  War  II  and  unified  these  units  with  the  establishment  of 
Tenth  Fleet.11 

After  seventeen  months  since  the  commencement  of  hostilities  marking  the  entry 
of  the  U.S.  into  World  War  II,  the  U.S.  Navy  formed  an  organization  responsible  for  the 
formulation  and  execution  of  operational  strategy  for  the  anti-submarine  campaign.12 
Tenth  Fleet  directed  the  efforts  of  the  hunter-killer  groups  composed  of  escort  carriers, 
destroyers  and  destroyer  escorts  assigned  to  the  Atlantic  Fleet.13  Commander  Tenth 
Fleet  exercised  direct  control  over  all  of  the  Atlantic  Sea  Frontiers,  which  were 
comprised  of  the  Eastern,  Caribbean  and  Gulf  Sea  Frontiers,  and  used  the  Sea  Frontier 
Commanders  as  Task  Force  Commanders.14  Although  no  ships  were  assigned  to 
Tenth  Fleet,  it  had  the  authority  to  direct  all  anti-submarine  activity  and  to  detach  naval 
surface  and  air  assets,  as  needed,  from  the  various  Atlantic  Commands.15  Moreover, 
Tenth  Fleet  had  a  broad  mandate  to  execute  its  mission;  search  and  destroy  enemy 
submarines,  protect  allied  shipping,  support  other  anti-submarine  forces,  exercise 
control  over  convoys  and  routing,  and  correlate  training  and  materiel  development.16  By 
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the  summer  of  1943,  Tenth  Fleet  had  developed  into  a  truly  unified  organization  that 
concentrated  all  anti-submarine  efforts,  to  include  intelligence,  force  allocation,  control 
of  convoys  and  the  development  of  tactical  doctrine  to  best  confront  the  U-boat  threat.17 
Defeating  the  U-boat 

There  were  a  number  of  factors  that  contributed  to  the  allies’  victory  over  the  U- 
boat.  One  of  Tenth  Fleet’s  key  elements  was  a  strong  intelligence  unit,  OP-20G,  under 
its  Operations  Division,  that  had  its  own  Submarine  Tracking  Room  with  ready  access 
to  ULTRA  (data  decrypted  from  Enigma  machines18)  and  HF/DF  (High  Frequency 
Direction  Finding)  fixes.19  Another  critical  factor  was  the  contribution  of  civilian 
scientists  in  the  development  of  doctrine  and  improved  weapons  that  would  prove 
decisive  in  the  spring  and  summer  of  1943. 20  Scientists  advocated  and  developed  the 
use  of  Magnetic  Anomaly  Detection  (MAD)  devices,  radio  sonobuoys,  retro-bombs  and 
acoustic  torpedoes  to  enable  allied  aircraft  to  better  target  and  engage  German  U- 
boats.21  Debate  over  campaign  strategy  and  anti-submarine  doctrine  led  offensive  and 
defensive  thinking  in  dealing  with  the  U-boat  threat;  however,  scientists  would  play  a 
significant  role  in  the  development  of  both  trains  of  thought.22  For  example,  scientists 
would  play  a  pivotal  role  in  sponsoring  and  developing  concepts  for  conducting 
offensive  operations  against  the  German  U-boats;  such  as  utilizing  aircraft  to  attack 
known  concentrations  of  U-boats  before  they  got  to  the  convoys.23  By  analyzing  the 
data  from  a  research  perspective,  scientists  were  able  to  develop  new  ways  to  better 
defend  convoys  and  minimize  their  losses  by  providing  more  robust  air  and  surface 
escorts.24  In  May  1943,  communications  intelligence  derived  from  OP-20G,  advances  in 
radar,  improved  weather,  and  a  host  of  new  weapons,  to  include  the  Mark  XXIV 
acoustic  torpedo,  enabled  allied  aircraft  to  track,  target  and  engage  U-boats,  which  up 
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to  this  point  had  enjoyed  operational  and  tactical  invisibility.25  The  allied  effort  against 
the  U-boat  would  continue  to  gain  momentum  through  the  summer  and  fall  of  1943  to  a 
point  in  which  the  threat  posed  by  the  U-boat  would  soon  be  significantly  diminished. 

On  October  27,  1943,  the  losses  incurred  by  the  U-boat  were  such  that  Admiral  King 
declared  “submarines  have  not  been  driven  from  the  seas,  but  they  have  changed 
status  from  a  menace  to  a  problem.”26  In  the  six  months  before  Tenth  Fleet  was 
created,  the  U.S.  Navy  sank  36  U-boats;  however,  it  sank  75  U-boats  the  following  six 
months.27  Thus,  Tenth  Fleet  was  able  to  accomplish  its  mission  objectives  in  a  short 
time  and  was  able  to  minimize  the  threat  of  the  U-boat  and  contribute  significantly  to  the 
Allied  victory  in  the  Atlantic.  Many  of  the  lessons  learned  during  the  establishment  of 
Tenth  Fleet  and  execution  of  its  mission,  to  include  the  importance  of  unity  of  effort, 
strong  intelligence  and  tight  cohesion  between  civilian  scientists  and  military  personnel, 
should  be  heeded  as  they  served  Tenth  Fleet  well  in  the  past,  and  could  do  so  again. 
Cyberspace  and  Modern  Threats 

Sixty-five  years  after  the  end  of  World  War  II  a  new  and  arguably  more  potent 
threat,  a  cyber  threat,  has  emerged  that  could  potentially  undermine  peace  and  security 
throughout  the  world.  This  new  threat  is  unlike  any  other  in  that  it  takes  place  in  a  man¬ 
made  domain  that  does  not  inhibit,  prevent  or  challenge  access  to  the  high  seas,  air 
space,  or  outer  space,  commonly  referred  to  as  the  global  commons.28  The  twenty-first 
century  has  born  witness  to  unprecedented  advancements  in  technology  and  no  country 
more  than  the  U.S.  has  immersed  itself  fully  in  the  cyber  age.  Cyberspace  has 
significantly  altered  the  way  people  communicate,  conduct  business  and  relate  to  each 
other.29  Our  nation’s  critical  infrastructure,  composed  of  private  and  public  institutions 
which  control  the  electric  power  grid,  telecommunications,  Internet,  financial  system, 
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transportation  management,  air  traffic  control  and  other  services,  is  largely  managed 
and  controlled  through  cyberspace  via  hundreds  of  thousands  of  interconnected 
computers,  servers,  routers,  switches  and  fiber  optic  cables.30  Thus,  a  healthy  and 
functioning  cyberspace  is  vital  to  our  economy  and  national  security. 

Unlike  the  internationally  recognized  domains  of  air  space,  outer  space  or  the 
high  seas,  cyberspace  is  not  a  traditional  global  common  and  there  has  been  little  effort 
to  define  or  delineate  the  notion  of  cyber  sovereignty.31  While  each  government  can  try 
to  manage  its  portion  of  cyberspace,  they  are  all  interconnected  around  the  world  and 
as  highlighted  in  Figure  1,  the  cyber  domain  transcends  physical  boundaries.32 

AW  of  the  warfighting  domains  intersect... 


Figure  1 .  Cyberspace  Domain  contained  within  and  transcends  other  Domains33 
Data  transmissions  flow  virtually  unhindered  in  cyberspace  without  any  regard  for  a 
nation’s  sovereignty,  and  anyone  with  access  to  cyberspace  enjoys  practically 
unfettered  access  to  navigate  and  communicate  in  this  domain.34 

In  the  U.S.  alone  there  were  5,488  breaches  of  government  computer  systems 
and  54,640  incidents  of  malicious  cyber  activity  against  the  Department  of  Defense 
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(DoD)  in  2008. 35  Although  one  can  argue  that  cyberspace  has  greatly  enhanced  man’s 
ability  to  communicate  with  one  another,  it  has  also  allowed  for  some  severe  unintended 
consequences,  namely  the  ability  for  state  and  non-state  actors  alike  to  use  the  domain 
to  do  significant  harm  with  little  fear  of  retribution.  Cyber  attack  weapons  are  emerging 
as  an  ever-growing  threat  aimed  at  altering,  disrupting,  deceiving,  degrading,  and/or 
destroying  computer  systems  or  networks,  which  significantly  increases  the  threat 
posed  to  our  critical  infrastructure  and  that  of  our  allies.36 
Baseline  Definitions  for  Cyberspace  Operations 

While  there  has  been  some  effort  between  U.S.  government  agencies,  such  as 
the  Department  of  Homeland  Security  (DHS)  and  DoD,  to  outline  baseline  cyber 
definitions,  these  have  not  been  widely  accepted  outside  of  the  government  although 
they  have  proven  useful  in  developing  doctrine  to  confront  the  cyber  threat.37  In  many 
cases,  events  in  cyberspace  blend  crime,  espionage,  and  military  action  in  ways  that 
render  them  indistinguishable  to  those  responsible  for  defending  and  responding  to 
such  incidents.38  Ultimately,  the  decision  as  to  whether  an  incident  in  cyberspace  is  an 
attack  or  constitutes  an  act  of  war  rests  with  the  nation’s  political  leadership,  as  does 
the  manner  in  which  the  nation  responds.39  For  good  reason,  the  cyberspace  domain 
can  be  characterized  by  its  vulnerability,  uncertainty,  complexity  and  ambiguity 
(VUCA).40  Threats  to  cyberspace  fall  within  six  discrete  categories:  traditional,  irregular, 
catastrophic,  disruptive,  natural  and  accidental.41 

Currently,  no  international  treaties  have  been  widely  endorsed  to  properly  define 
cyber  sovereignty  or  adequately  deal  with  the  problems  posed  by  cyber  crime,  cyber 
attack,  cyber  espionage,  cyber  terrorism  and  cyber  war.  Arguably  the  most  important 
effort  at  reaching  some  semblance  of  international  cooperation  on  cyber  crime  took 


6 


place  in  Budapest,  Hungary  on  23  November  2001 ,  when  the  Council  of  Europe 
convened  a  Convention  on  Cybercrime  that  was  attended  by  representatives  from  52 
nations.42  This  marked  the  first  multilateral  instrument  drafted  to  address  the  problems 
posed  by  the  spread  of  criminal  activity  on  computer  networks.43  The  Council  of  Europe 
Convention  on  Cybercrime  entered  into  force  in  July  2004  and  remains  the  sole  binding 
international  treaty  on  the  subject  to  date;  however,  with  less  than  half  of  the  attendees 
(22  as  of  9  March  2009)  ratifying  the  treaty,  it  makes  it  extremely  difficult  to  lay  down 
guidelines  for  governments  wishing  to  develop  effective  legislation  against  cybercrime 
and  boost  international  cooperation.44  The  lack  of  internationally  agreed  definitions 
exacerbates  efforts  to  tackle  these  issues  as  there  are  numerous  jurisdictions,  laws,  and 
caveats  that  often  hinder  efforts  to  deal  with  the  problem  in  a  multilateral  arena.  Often, 
nations  are  hindered  in  their  ability  to  protect  their  networks  against  cyber  attacks  much 
less  from  trying  to  deter  such  attacks  in  the  first  place. 

Cyber  Threat  to  Critical  U.S.  Infrastructure 

Shortly  after  taking  office,  President  Obama  identified  the  cyber  threat  as  “one  of 
the  most  serious  economic  and  national  security  challenges  we  face  as  a  nation.”45  The 
President  ordered  a  thorough  review  of  federal  efforts  to  secure  cyberspace  and  the 
development  of  a  comprehensive  whole  of  government  approach  to  securing  America’s 
information  and  communications  infrastructure.46  The  resulting  Cyberspace  Policy 
Review  outlined  several  proposals,  such  as  the  need  for  an  Executive  Branch 
Cybersecurity  Coordinator,  commonly  referred  to  as  the  White  House  Cyber  Czar,  to 
work  closely  with  all  key  agencies  involved  in  securing  the  digital  infrastructure  of  the 
U.S.47  The  Review  further  posited  that  initiatives  should  build  upon  the  Comprehensive 
National  Cybersecurity  Initiative  (CNCI),  which  was  first  implemented  by  President 
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George  W.  Bush  in  January  2008. 48  One  way  the  newly  appointed  White  House  Cyber 
Czar,  Howard  Schmidt,  chose  to  enhance  coordination  and  information  sharing  between 
agencies  with  the  Federal  government,  to  include  DHS  and  DoD,  was  to  publish  an 
unclassified  version  of  the  CNCI.49  The  CNCI  includes  funding  within  federal  law 
enforcement,  intelligence,  and  defense  communities  to  enhance  the  key  areas  of 
criminal  investigation,  intelligence,  and  information  assurance.50  To  accomplish  these 
functions,  CNCI’s  mandate  specifies: 

(a)  establish  a  front  line  defense  against  today’s  immediate  threats, 

(b)  defend  against  the  full  spectrum  of  cyber  threats,  and 

(c)  strengthen  the  future  cybersecurity  environment.51 

Long  before  the  CNCI  was  published,  cybersecurity  was  on  the  national  agenda  and 
identified  as  a  vital  national  security  interest  as  these  attacks  have  the  potential  to 
disable  electrical  power  systems,  corrupt  financial  data  or  hijack  air  traffic  control 
system.52  On  17  December  2003,  Homeland  Security  Presidential  Directive  7  (HSPD-7) 
established  a  national  policy  for  federal  departments  and  agencies  to  identify  and 
prioritize  critical  infrastructure  and  to  protect  them  from  attacks.53  As  outlined  in  Table 
1 ,  the  roles  and  responsibilities  are  wide  ranging  and  require  unity  of  effort.  As  such, 
HSPD-7  dictates  that  each  sector-specific  agency  shall: 

(a)  collaborate  with  all  relevant  Federal  departments  and  agencies,  State 
and  local  governments,  and  the  private  sector,  including  key  persons  and 
entities  in  their  infrastructure  sector; 

(b)  conduct  or  facilitate  vulnerability  assessments  of  the  sector;  and 

(c)  encourage  risk  management  strategies  to  protect  against  and  mitigate 
the  effects  of  attacks  against  critical  infrastructure  and  key  resources.54 
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Federal  Agency 

Sector  Responsibilities 

Department  of  Agriculture 

agriculture,  food  (meat,  poultry,  egg  products) 

Health  and  Human  Services 

public  health,  healthcare,  and  food  (other  than 
meat,  poultry,  egg  products) 

Environmental  Protection  Agency 

drinking  water  and  water  treatment  systems 

Department  of  Energy 

energy,  including  the  production  refining,  storage, 
and  distribution  of  oil  and  gas,  and  electric  power 
except  for  commercial  nuclear  power  facilities 

Department  of  the  Treasury 

banking  and  finance 

Department  of  the  Interior 

national  monuments  and  icons 

Department  of  Defense 

defense  industrial  base 

Table  1 .  Roles  and  Responsibilities  of  Sector-Specific  Federal  Agencies55 


Attacks  on  U.S.  infrastructure  are  significant  and  growing;  this  issue  is  pressing 
and  requires  immediate  attention.56  While  the  2003  National  Strategy  to  Secure 
Cyberspace  (NSSC)  outlines  responsibilities  for  DHS  to  protect  civilian  and  government 
networks  and  the  2006  National  Military  Strategy  for  Cyberspace  Operations  (NMS-CO) 
outlines  responsibilities  for  DoD  to  protect  the  military’s  networks,  there  needs  to  be 
considerable  effort  and  coordination  between  DHS  and  DoD  to  effectively  counter  the 
cyber  threat  to  the  U.S.  More  importantly,  the  CNCI  offers  a  coherent  strategy  that 
augments  those  efforts  specified  by  the  NSSC  and  NMS-CO,  thus  ensuring  a  whole  of 
government  approach  to  countering  the  cyber  threat. 

Cyber  Threat  to  U.S.  Military 

The  U.S.  military  relies  on  cyberspace  as  a  critical  component  of  its  military 
effectiveness  to  such  an  extent  that  the  use  of  computer  networks  to  gather,  organize 
and  move  information  may  prove  to  be  its  Achilles  heel  in  the  information  age.57  This  is 
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as  evident  today  as  it  was  in  December  2006  when  the  NMS-CO  correctly  postulated 

that  the  U.S.  military  dependence  on  cyberspace  would  continue  to  increase.58 

DoD  force  transformation  hinges  largely  on  a  move  toward  net-centric 
operations.  Significant  investments  in  force  structure,  infrastructure,  and 
programs  have  oriented  DoD  components  towards  the  use  of  cyberspace 
as  an  integral  part  of  warfighting.  Threat  actors  can  take  advantage  of  this 
dependence  and  adversely  affect  cyberspace  operations.59 

Currently,  on  any  given  day  the  DoD  operates  over  7,000,000,000  computers  and 

telecommunication  units  via  15,000  computer  networks  across  more  than  4,000  military 

installations  located  in  88  countries  utilizing  thousands  of  warfighting  and  support 

applications.60  Clearly,  the  magnitude  and  diversity  of  DoD  configurations  makes  it 

difficult  to  maintain  situational  awareness  and  manage  the  computer  network  risks, 

much  less  the  entire  GIG.61  Therefore,  it  is  incumbent  that  the  U.S.  military  take  steps 

not  only  to  perform  its  three  main  missions  outlined  in  NMS-CO,62  but  also  to  ensure  the 

ability  to  operate  unhindered  in  cyberspace  in  order  to  conduct  full  spectrum  operations 

across  all  the  global  commons. 

Importance  of  Cyber  Attribution 

The  Internet  has  provided  a  virtual  safe  haven  for  those  who  would  threaten  the 
U.S.  military,  to  include  non-state  actors,  terrorists,  criminal  groups  and  hackers.63  By 
its  very  nature,  cyberspace  is  a  domain  amenable  to  asymmetric  warfare  because  it  can 
be  used  anonymously,  which  makes  it  difficult  to  deter,  let  alone  punish  those  who 
would  exploit  this  domain  for  nefarious  acts.64  In  order  to  defend,  deter  and  punish  we 
need  to  significantly  improve  our  cyber  forensics  and  attribution  capability  so  that  we 
can  mitigate  the  advantages  currently  prevalent  in  cyberspace,  namely  stealth  and 
anonymity.  Improved  attribution  will  also  decrease  the  risk  of  “false  flag”  attacks,  which 
allow  perpetrators  to  mask  their  involvement  or  disguise  it  as  an  attack  carried  out  by 
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another  country.65  However,  before  any  organization  can  choose  to  expand  their  cyber 
operations  from  defensive  to  offensive  (punitive/retaliatory),  it  must  ensure  it  has  the 
requisite  forensics  capacity  to  adequately  attribute  a  cyber  act  to  a  particular 
perpetrator.  Failure  to  properly  attribute  a  cyber  act  to  the  responsible  perpetrator  prior 
to  taking  retaliatory  action  is  sure  to  garner  widespread  condemnation  and  open  the 
floodgates  for  would-be  perpetrators  to  conduct  cyber  attacks  of  their  own. 

Cyber  Defense  and  Deterrence 

Much  of  our  efforts  on  cyber  security  focus  on  defense,  to  include  protecting 
computers,  data  and  networks  from  unauthorized  use  or  manipulation.66  Cyber 
defense,  protecting  our  computers  and  networks  from  attack,  alone  will  do  little  to  keep 
our  nation  safe  from  the  growing  attacks  faced  in  this  domain  because  every  new 
firewall  brings  about  a  more  robust  virus  or  means  for  disabling  or  bypassing  our 
security  measures.  While  cyber  defense  is  an  important  aspect  for  any  cyber  policy  and 
one  in  which  the  U.S.  should  continue  to  invest,  it  is  completely  insufficient  by  itself  in 
deterring  the  growing  cyber  threat.  As  noted  earlier,  the  category  of  cyber  threats 
highlighted  in  the  NMS-CO,  namely  traditional,  irregular,  catastrophic,  disruptive,  natural 
and  accidental,  remains  the  same  whether  we  are  discussing  civilian  business 
networks,  links  to  critical  infrastructure,  or  DoD  networks.  HSPD-7  clearly  delineates 
each  federal  organization  that  is  responsible  for  defending  their  respective  portion  of  the 
cyber  domain;  however,  it  is  evident  that  cyber  defense  in  not  enough  and  the  U.S. 
must  develop  a  robust  and  comprehensive  cyber  deterrence  and  retribution  policy 
against  hostile  actors.  Such  a  deterrence  policy  needs  to  be  widely  disseminated  and 
focus  on  all  available  military  means  to  ensure  there  is  no  doubt  as  to  what  action  the 
U.S.  is  prepared  to  take  to  defend  its  national  security.  While  not  all  cyber  attacks 
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would  warrant  retribution  or  be  considered  an  act  of  hostility  or  war,  we  must  recognize 

that  our  critical  infrastructure  is  a  vital  national  security  interest.  This  means  that  all 

federal  agencies  assigned  responsibilities  for  safeguarding  elements  of  our  critical 

infrastructure  must  work  in  a  collaborative  environment  to  ensure  that  all  sectors  are 

adequately  defended  from  emerging  cyber  threats.  A  ladder  of  escalation  will  need  to 

be  reviewed  to  carefully  consider  those  cyber  acts  that  constitute  a  threat  to  our  national 

security  and  those  that  may  be  deemed  acts  of  sabotage,  mischief,  crime  or  espionage. 

Although  we  are  continually  strengthening  our  cyber  defensive  and  offensive 

capabilities  and  have  unprecedented  diplomatic  and  economic  power  to  exert  pressure 

on  our  foes,  our  true  strength  as  a  nation  resides  in  our  unmatched  military  strength. 

We  need  to  make  clear  to  the  world  that  our  critical  infrastructure  constitutes  a  vital 

national  security  interest  and  we  are  prepared  to  take  appropriate  measures  to  defend 

it.  Moreover,  there  are  clearly  instances  when  an  attack  in  the  cyber  domain  would  be 

comparable  to  an  act  of  war  and  thus  the  U.S.  must  demonstrate  that  it  will  not  hesitate 

to  take  quick  and  devastating  action  to  deter  and  punish  such  attacks  from  taking  place. 

While  we  will  not  hesitate  to  utilize  the  cyber  domain  to  attack  our  enemies  and  deter 

aggression,  we  must  ensure  that  all  military  means  are  available  to  adequately  protect 

and  defend  our  critical  national  interests  from  attack. 

Tenth  Fleet  Re-emerges  to  Tackle  Cyber  Threat 

In  October  2007,  the  U.S.  Navy  CNO,  Admiral  Gary  Roughead  highlighted  the 

seriousness  of  the  growing  cyber  threat  when  he  stated  the  following: 

The  opening  rounds  of  the  next  war  will  likely  be  in  cyberspace  -  the  Navy 
must  be  ready  to  prevent  wars  as  well  as  win  them;  to  do  that,  we  must 
understand  how  we  live,  operate  and  win  in  cyberspace.67 
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Today’s  modern  Navy  requires  “uninhibited  access  to  assured  communication 
capabilities  in  cyberspace.”68  More  importantly,  the  Navy  must  be  able  to  execute  its  full 
range  of  global  missions  when  cyberspace  is  denied  and  must  also  be  able  to  deny  any 
enemy,  be  it  a  state  or  non-state  actor,  the  ability  to  operate  in  cyberspace  when  it  is 
appropriate  or  required.69  The  Navy  has  made  some  significant  organizational 
decisions  to  realign  its  posture  in  the  information  age  and  be  more  effective  in  facing  the 
cyber  threat.70 

On  1  October  2009,  the  Navy  reorganized  the  Office  of  the  Chief  of  Naval 
Operations  (OPNAV)  staff  to  achieve  the  requisite  integration  and  innovation  necessary 
for  achieving  warfighting  dominance  across  the  maritime,  cyber  and  information 
domains.71  The  merging  of  the  Intelligence  directorate  (N2)  with  the  Communication 
Networks  directorate  (N6)  into  a  single  directorate,  known  as  the  Information 
Dominance  Corps  (N2/N6),  will  better  enable  the  Navy  to  address  the  challenges  in  the 
Information  Age.72  The  44,000  active  and  Reserve  Navy  officers,  enlisted  and  civilian 
professionals  who  comprise  the  Information  Dominance  Corps  will  be  incorporated  into 
each  and  every  Navy  organization  associated  with  achieving  warfighter  dominance  in 
the  maritime,  cyber  and  information  domain,  to  include  the  newly  reconstituted  Fleet 
Cyber  Command/Tenth  Fleet.  With  this  groundbreaking  decision,  the  Navy  is  effectively 
elevating  “Information”  to  a  core  warfighting  capability  on  par  with  other  naval  combat 
competencies.73  The  first  ever  Deputy  Chief  of  Naval  Operations  for  N2/N6,  Vice 
Admiral  (VADM)  David  Dorsett,  will  be  responsible  for  making  investment  decisions  for 
information,  cyber  and  space  capabilities,  and  for  also  developing  the  Navy’s 
information  architectures.74  According  to  VADM  Dorsett,  "the  Information  Dominance 
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Corps  will  create  a  cadre  of  information  specialists,  who  come  with  individual  community 
identities  and  unite  to  be  managed  as  a  corps,  developed  as  a  corps,  and  to  fight  as  a 
corps."75  The  individual  communities  that  will  be  merged  into  the  Information 
Dominance  Corps  include  information  professional  officers,  information  warfare  officers, 
naval  intelligence  officers,  meteorological  and  oceanography  officers,  space  cadre 
officers,  aerographer's  mates,  cryptologic  technicians,  intelligence  specialist,  information 
systems  technicians  and  civilian  personnel.76  This  is  an  extremely  important  and  time- 
critical  decision  considering  the  guidance  issued  from  the  Chairman  of  the  Joint  Chiefs 
of  Staff  (CJCS)  highlighting  the  fundamental  need  to  protect  the  global  commons  of  the 
sea,  air,  space  and  cyberspace.77 

It  came  to  no  one’s  surprise  on  23  June  2009  when  Secretary  of  Defense  Robert 
Gates  ordered  U.S.  Strategic  Command  to  establish  a  new  cyber  command  by  October 
2009  and  to  have  it  fully  functioning  by  October  201 0. 78  U.S.  Cyber  Command  would 
effectively  unify  the  military’s  previously  separate  defensive  and  offensive  cyberspace 
operations,  the  Joint  Task  Force-Global  Network  Operations  and  the  Joint  Functional 
Component  Command-Network  Warfare.79  Shortly  thereafter,  each  component  of  the 
military  was  tasked  to  provide  component  support  to  the  newly  established  U.S.  Cyber 
Command  depicted  below  in  Figure  2.  The  overarching  mission  will  be  on  enhancing 
the  organization  of  the  cyber  effort  and  adding  much  needed  resources  to  accelerate 
development  of  DoD  cyber  capabilities  and  integrate  them  into  its  daily  operations.80 
U.S.  Cyber  Command  would  focus  solely  on  military  computer  networks  and  operations 
outlined  in  NMS-CO,  leaving  defense  of  civilian  networks  to  DHS  and  its  corresponding 
guidance  in  the  NSSC.81 
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Command  ■■■■■■•  Dual-Hat  Relationship  to  be  determined 

Support  Coordination 


Figure  2.  U.S.  Cyber  Command  Organization82 


On  23  July  2009,  the  CNO  directed  that  Fleet  Cyber  Command/Tenth  Fleet  be 
established  on  1  October  2009  to  meet  the  tasking  of  the  Defense  Secretary.83  Fleet 
Cyber  Command/Tenth  Fleet  was  established  as  a  focused  force  organized  to  defend, 
exploit  and  achieve  operational  effects  in  and  through  cyberspace  and  to  assure 
freedom  of  maneuver  in  cyberspace,  which  is  vital  to  successful  naval  operations.84 
While  Fleet  Cyber  Command  will  be  under  Administrative  Control  (ADCON)  to  the  CNO, 
it  will  be  under  Operational  Control  (OPCON)  to  U.S.  Cyber  Command  and  will  serve  as 
its  central  operational  authority  for  networks,  intelligence,  cryptology/signals  intelligence 
(SIGINT),  information  operations  (10),  cyber,  electronic  warfare,  and  space  in  support  of 
naval  forces  ashore  and  at  sea.85  10  comprises  multiple  warfare  disciplines,  to  include 
electronic  warfare  (EW),  psychological  operations  (PSYOP),  computer  network 
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operations,  military  deception  and  operations  security  (OPSEC).  Computer  network 
operations  itself  reveal  three  further  areas,  which  are  computer  network  attack  (CNA), 
computer  network  defense  (CND),  and  computer  network  exploitation  (CNE).86 
Success  will  only  be  possible  by  synchronizing  Navy  computer  network  operations 
capabilities  such  that  CNA,  CND  and  CNE  are  planned  and  executed  as  an  integrated 
effort  that  complements  Joint  and  National  cyber  efforts.87  The  specified  mission  of 
Fleet  Cyber  Command  is  as  follows: 

to  direct  Navy  cyberspace  operations  globally  to  deter  and  defeat 
aggression  and  to  ensure  freedom  of  action  to  achieve  military  objectives 
in  and  through  cyberspace;  to  organize  and  direct  Navy  cryptologic 
operations  worldwide  and  support  information  operations  and  space 
planning  and  operations,  as  directed;  to  direct,  operate,  maintain,  secure 
and  defend  the  Navy’s  portion  of  the  Global  Information  Grid;  to  deliver 
integrated  cyber,  information  operations  cryptologic  and  space 
capabilities;  and  to  deliver  global  Navy  cyber  network  common  cyber 
operational  requirements.88 

As  directed  by  Fleet  Cyber  Command  (depicted  below  in  Figure  3),  Commander 
Tenth  Fleet  will  direct  operations  and  provide  operational  support  to  Navy  commanders 
worldwide  in  the  area  of  cyber,  information  and  computer  network  operations,  electronic 
warfare,  and  space.89  Tenth  Fleet  will  be  required  to  “direct  and  support  operations  to 
deter  and  defeat  aggression,  ensure  freedom  of  action,  and  achieve  military  objectives 
in  and  through  cyberspace  across  the  full  spectrum  of  military  operations.”90  Fortunately 
for  Tenth  Fleet,  it  has  a  proud  tradition  of  excellence  passed  down  from  its  predecessor 
Command,  which  should  serve  it  well  as  it  fully  engages  this  new  cyber  threat.  During 
World  War  II,  Tenth  Fleet  was  an  organization  whose  success  “depended  less  on 
manned  and  massed  fire  power  than  on  intelligence  and  information.”91  More  important, 
as  Tenth  Fleet  is  tackling  the  cyber  mission,  “even  more  so  than  before,  victory  will  be 
predicated  on  timely  and  accurate  intelligence  rather  than  fire  power.”92  Thus,  it  would 
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serve  Fleet  Cyber  Command/Tenth  Fleet  well  to  recognize  the  importance  of  unity  of 
effort,  strong  intelligence  and  tight  cohesion  between  civilian  scientists  and  military 
personnel,  the  same  tenets  of  success  which  assured  Tenth  Fleet  of  victory  over  the  U- 
boat  more  than  60  years  ago.  The  specified  mission  of  Tenth  Fleet  is  as  follows: 


to  serve  as  the  Number  Fleet  for  Fleet  Cyber  Command  and  exercise 
operational  control  of  assigned  Naval  forces;  to  coordinate  with  other 
naval,  coalition  and  Joint  Task  Forces  to  execute  the  full  spectrum  of 
cyber,  electronic  warfare,  information  operations  and  signal  intelligence 
capabilities  and  missions  across  the  cyber,  electromagnetic  and  space 
domains.93 


Figure  3.  Navy  Cyber  Command  and  Control  Relationships94 


Tenth  Fleet  Forging  Ahead 

VADM  Barry  McCullough  is  dual-hatted  as  the  Commander  of  both  U.S.  Fleet 


Cyber  Command  and  the  U.S.  Tenth  Fleet.  On  29  January  2010,  a  ribbon-cutting 


ceremony  was  hosted  by  the  CNO  to  commemorate  Fleet  Cyber  Command/Tenth  Fleet 
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achieving  initial  operational  capability  (IOC).95  In  order  to  ensure  unity  of  effort  in  the 
cyber  mission,  Tenth  Fleet  will  assume  OPCON  of  the  Navy’s  cyber,  network 
operations,  cryptologic  and  space  forces;  Naval  Network  Warfare  Command 
(NAVNETWARCOM),  Navy  Cyber  Forces  (NAVCYBERFOR),  the  regional  Navy 
Information  Operations  Commands  (NIOCs),  Navy  Cyber  Defense  Operations 
Command  (NCDOC)  and  Navy  and  Marine  Corps  Spectrum  Center  (NMCSC).96  In 
short,  NCDOC  will  focus  on  defensive  cyber  capabilities;  NAVNETWARCOM  will 
conduct  network  and  space  operations  in  support  of  naval  forces;  NAVCYBERFOR  is 
the  Type  Commander  (TYCOM)  and  will  focus  on  maintaining  and  operating  the 
computer  networks,  in  addition  to  TYCOM  responsibilities  of  manning,  training  and 
equipping  cyber  forces;97  the  15  regional  NIOCs  will  focus  on  forensics,  attribution  and 
providing  cyber  support  to  the  fleets;98  while  NIOC  Suitland  (located  at  the  Office  of 
Naval  Intelligence)  will  concentrate  on  target  development.99  Forensics  and  attribution 
are  especially  important  in  the  cyber  domain  because  failure  to  properly  apply  blame  for 
a  cyber  attack  by  a  state  or  non-state  actor  severely  limits  the  ability  of  the  strategic 
leadership  to  take  appropriate  action.  Attribution  isn’t  impossible  to  carry  out  in  the 
cyber  domain  but  just  as  in  World  War  II  when  locating  submarines  was  the  most 
complex  problem  of  the  day,  this  new  cyber  problem  can  be  tackled  by  leveraging  the 
efforts  of  organic  and  outside  organizations,  particularly  the  expertise  of  civilian 
scientists. 

VADM  McCullough  highlighted  the  importance  of  the  intelligence  effort  to  the 
cyber  mission  when  he  stated  that  Tenth  Fleet  “must  be  able  to  exercise  command  and 
control  over  our  networks  with  dynamic,  real  time  defense  and  information  assurance 
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enabled  by  intelligence  collection.100  A  strong  intelligence  capability  will  be  fostered  at 
Tenth  Fleet  and  its  regional  NIOCs  and  must  be  leveraged  with  the  intelligence  entities 
at  U.S.  Cyber  Command  and  its  associated  military  components.  Intelligence  will  be 
integral  in  profiling  threats,  enhancing  defensive  strategies,  and  recognizing  and 
monitoring  known/potential  adversaries.101  To  maximize  the  role  Tenth  Fleet  and  her 
sister  component  cyber  commands  fulfill,  it  is  critical  that  intelligence  information  be 
properly  collected,  analyzed,  and  disseminated  in  a  timely  manner  with  joint  and 
national  agencies  responsible  for  safeguarding  our  nation’s  computer  networks.  While 
Tenth  Fleet  will  eventually  provide  forces  and  capabilities  to  U.S.  Cyber  Command  that 
could  be  used  in  an  offensive  manner,  near  term  focus  will  be  on  network  defense  to 
ensure  the  Navy  continues  to  enjoy  unfettered  access  to  cyberspace  while  carrying  out 
its  global  missions.102 

Tenth  Fleet  has  established  a  Maritime  Operations  Center  (MOC)  to  effectively 
plan,  execute,  control  and  monitor  Tenth  Fleet  operations;  support  Fleet  Cyber 
Command;  align  to  U.S.  Strategic  Command’s  Operation  Center,  as  directed;  and  will 
further  align  to  the  numbered  fleets  and  other  command  and  staff  organizations,  as 
required  by  mission  tasking.103  As  Tenth  Fleet  approaches  Full  Operational  Capability 
(FOC)  on  or  about  October  2010,  it  will  need  to  develop  a  plan  and  associated 
requirements  for  participation  in  the  U.S.  Cyber  Command  Integration  Team  Concept.104 
As  part  of  its  Integration  Team  Concept,  it  will  be  critical  for  the  Tenth  Fleet  MOC  to  be 
able  to  rapidly  and  effectively  communicate  with  U.S.  Cyber  Command  and  its 
subordinate  and  fleet  commands  to  maintain  sufficient  situational  awareness  of  its 
networks  and  to  be  able  to  respond  in  a  timely  manner  to  any  cyber  threat. 
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In  order  to  execute  its  defined  mission,  it  is  imperative  that  Tenth  Fleet  is  able  to 
exercise  command  and  control  over  the  Navy’s  networks  to  respond  to  any  significant 
malicious  network  activity.105  Especially  important  to  this  overall  unity  of  effort  will  be 
the  ability  of  Tenth  Fleet  to  formulate  a  coherent  cyber  strategy  that  encompasses 
several  tasks,  to  include  the  following: 

(a)  Establish  initial  task  organization  and  develop  a  plan  and  associated 
requirements  for  participation  in  the  U.S.  Cyber  Command  integration 
team  concept. 

(b)  Updating  cyber  related  global  operational  tasks  (OPTASKS)  to  define 
operational  cyber  force  subordinate  command  responsibilities,  tasks,  and 
regional/global  alignment. 

(c)  Develop  and  implement  watch  certification  and  accreditation  standards 
for  subordinate  and  fleet  commands. 

(d)  Standardize  reporting  criteria  and  methods  for  maintaining  shared 
situational  awareness  across  all  Tenth  Fleet  lines  of  operations  and 
responsibilities.106 

Without  this  overarching  guidance  passed  down  to  subordinate  and  fleet 
commanders,  it  is  highly  likely  disparate  policies  and  guidelines  will  be  carried  out  with 
little  regard  to  the  overall  cyber  effort  being  undertaken  by  Tenth  Fleet,  U.S.  Cyber 
Command  or  its  associated  military  components.  That  being  said,  there  are  several 
steps  and  measures  Tenth  Fleet  can  undertake  now  to  ensure  it  maintains  unity  of 
effort,  develops  a  strong  intelligence  capability  and  fosters  tight  cohesion  between 
military  and  civilian  scientists. 

Tenth  Fleet  Innovation  and  Collaboration 

Tenth  Fleet  is  on  the  right  track  with  several  programs  it  has  undertaken  the  past 
few  months  with  regards  to  increased  innovation  and  collaboration,  particularly  its 
partnerships  with  academic  institutions,  to  meet  the  challenge  of  the  cyber  threat. 
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Recent  engagements  with  the  U.S.  Naval  War  College,  Carnegie  Mellon  University  and 
Johns  Hopkins  University  highlight  the  emphasis  being  placed  on  building  a  tight 
cohesion  with  academia  to  enhance  the  cyber  capabilities  at  Fleet  Cyber 
Command/Tenth  Fleet.107  The  difficulty  will  be  sustaining  its  momentum  of  exploring 
new  and  innovative  ways  to  coordinate  and  collaborate  across  joint  and  national  efforts 
to  achieve  its  goal  of  being  the  preeminent  cyber  military  organization.  VADM 
McCullough  indicated  this  would  be  a  priority  during  the  recent  commissioning 
ceremony  when  he  highlighted  that  to  be  able  to  carry  out  its  assigned  mission,  Tenth 
Fleet  needed  to  “work  with  our  sister  services,  academia,  agencies,  industry,  allies  and 
partners,  for  the  challenge  is  so  large,  to  go  it  alone  is  not  possible.”108  Fleet  Cyber 
Command/Tenth  Fleet  is  truly  thinking  outside  of  the  box  with  civilian  personnel 
comprising  approximately  45  percent  of  its  staff,  a  significant  departure  from  the  typical 
Navy  staff.109  Civilians  add  not  only  continuity  but  critical  cyber  expertise  that  is  missing 
from  our  career  officers  who  routinely  change  jobs  and  positions  every  two  to  three 
years.  Other  programs  include  the  Cyber  Federal  Executive  Fellowship  program,  which 
grants  mid-grade  officers  in  the  Information  Dominance  Corps  the  opportunity  to 
increase  their  understanding  of  cyber  policy  development  and  decision  making  at 
prestigious  civilian  research  institutions.110  There  is  even  an  outreach  program  to  attract 
high  school  and  college  students  by  awarding  four-year  college  Naval  Reserve  Officers 
Training  Corps  (NROTC)  scholarships  for  students  who  demonstrate  advanced  cyber 
security  skills.  This  newly  implemented  cyber-option  NROTC  scholarship  is  another  key 
part  of  a  comprehensive  strategy  to  attract,  recruit  and  develop  elite  cyber  professionals 
needed  to  operate  securely  and  effectively  in  cyber  space.111  In  December  2009,  the 
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U.S.  Naval  Academy  in  Annapolis,  Maryland  created  the  Center  for  Cyber  Security 
Studies  to  “provide  the  education,  resources  and  motivation  to  enable  midshipmen  to 
become  effective  leaders  in  ever-increasing  cyber-enabled  Navy  and  Marine  Corps 
missions.”112  This  new  cyber  security  center  in  Annapolis  is  another  opportunity  for 
Tenth  Fleet  to  take  an  active  role  in  facilitating  the  development  and  nurturing  of  future 
Navy  cyber  warriors.  One  of  the  more  innovative  ideas  is  the  outreach  to  civilians 
currently  working  in  the  cyber  arena  to  join  the  naval  reserves  in  order  to  build  the  skills 
and  expertise  of  the  Navy’s  burgeoning  cyber  professionals.113 

Tenth  Fleet  has  also  made  huge  strides  partnering  with  Navy,  military  and  civilian 
agencies  to  help  nurture  its  development  to  keep  pace  with  future  technological 
challenges.  It  was  recently  announced  that  the  Armed  Forces  Communications  and 
Electronics  Association  (AFCEA)  Intelligence  Committee  and  the  Naval  Intelligence 
Professionals  (NIP)  will  host  a  one-day  conference  on  22  June  2010  to  “focus  on  core 
components  of  the  Navy’s  strategy  for  achieving  information  dominance  and  to  explore 
how  the  public  and  private  sectors  can  work  with  the  Navy  to  ensure  that  it  has  state  of 
the  art  capabilities  and  avoids  technological  surprise.”114  Program  sessions  will  cover 
many  issues  that  affect  Fleet  Cyber  Command/Tenth  Fleet,  to  include  Intelligence, 
Cyber  Warfare,  Command  and  Control  and  Information  &  Knowledge  Management. 
Attendees  will  include  the  CNO,  Deputy  CNO  for  N2/N6  (Information  Dominance),  and 
Commander  U.S.  Fleet  Cyber  Command/U.S.  Tenth  Fleet  and  senior  leaders 
comprising  the  Information  Dominance  Corps.115  These  conferences  not  only  foster 
improved  information  sharing  but  also  highlight  the  significance  of  the  cyber  threat  and 
positive  direction  the  Navy  is  taking  to  lead  cyber  innovation  and  collaboration. 
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Recommendations  for  Tenth  Fleet 


Develop  a  Cyberspace  Common  Operational  Picture  (CS-COP).  In  order  to 
adequately  defend  the  Navy’s  computer  and  communication  networks,  Tenth  Fleet 
needs  to  maintain  100  percent  accountability  of  its  networks  and  be  able  to  track  and 
respond  to  threats  whenever  and  wherever  needed.  The  National  Security 
Agency/Central  Security  Service  Threat  Operations  Center  (NTOC)  currently  maintains 
a  joint  database  for  all  reported  incidents  occurring  in  the  military  network  domain.116 
However,  maintaining  a  database  of  incidents  doesn’t  address  the  lack  of  effective 
command  and  control  for  information  assurance,  which  is  exacerbated  by  the  sheer 
magnitude  of  different  DoD  network  configurations  systems  in  existence  today.117  While 
NTOC  makes  pertinent  threat  information  available  to  Tenth  Fleet,  there  is  not  a  single 
repository  located  inside  Tenth  Fleet  HQ  where  MOC  watchstanders  can  access  this 
database  and  view  the  health  of  the  Navy’s,  much  less  DoD,  networks  in  real  time. 

Thus,  situational  awareness  is  a  fundamental  problem  for  not  only  Tenth  Fleet  but  also 
for  DoD  and  DHS.  More  importantly,  once  U.S.  Cyber  Command  is  fully  stood  up  and 
achieves  FOC,  it  will  be  imperative  that  it  be  able  to  rapidly  and  accurately  assess  the 
status  of  military  networks  and  for  the  individual  service  components,  including  Tenth 
Fleet,  to  be  able  to  do  the  same.  Tenth  Fleet  should  take  the  necessary  steps  to  track 
and  display  in  real  time  the  status  of  the  Navy’s  networks  and  make  this  available  to 
subordinate  commands,  fellow  service  cyber  commands,  and  U.S.  Cyber  Command. 
The  Navy  is  accustomed  to  tracking,  displaying  and  disseminating  friendly,  neutral  and 
enemy  surface,  subsurface  and  air  contacts  real-time,  known  as  the  Common 
Operational  Picture  (COP).  A  CS-COP  would  allow  the  Tenth  Fleet  MOC  to  better 
maintain  situational  awareness  of  its  multiple  networks  and  to  rapidly  and  accurately 
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coordinate  with  U.S.  Cyber  Command  and  NTOC  to  report  and  respond  to  threats  in  a 
timely  manner.  Due  to  its  role  in  computer  network  defense,  the  CS-COP  would  ideally 
be  managed  by  NAVCYBERFOR  or  NCDOC  to  optimize  threat  response  and 
mitigation;  however,  the  important  point  is  that  Tenth  Fleet  must  have  situational 
awareness  on  the  status,  threats  and  vulnerabilities  of  its  cyber  networks  at  all  times. 
This  will  allow  Tenth  Fleet  to  better  coordinate  and  corroborate  with  other  DoD  and  DHS 
cyber  organizations  in  a  timely  manner  to  mitigate  and  respond  to  cyber  threats. 

Develop  Well-Trained  Cyber  Warriors  across  DoD.  There  are  two  key  elements 
that  need  to  be  addressed  by  Tenth  Fleet  to  ensure  it  recruits,  retains  and  develops  the 
best  cadre  of  cyber  warriors  -  education  and  training.  A  common  adage  is  that  an 
organization  is  only  as  good  as  its  people,  and  this  is  especially  true  for  the  military. 

The  Navy  is  facing  a  challenge  in  recruiting  cyber  experts  because  of  increased 
competition  with  sister  services,  academia,  government  organizations  and  private 
businesses.  In  order  for  the  military  to  compete  with  other  enterprises  for  the  dwindling 
pool  of  cyber  warriors,  it  needs  to  be  proactive  with  its  recruitment,  education,  and 
incentives  programs  to  attract  and  retain  the  best  talent.  With  each  military  service 
component  conducting  its  own  level  of  cyber  training  to  meet  its  needs  and 
requirements,  it  seems  that  limited  resources  would  be  better  spent  consolidating  and 
enhancing  those  programs  identified  as  the  most  effective  and  making  them  available  to 
all  DoD  cyber  warriors,  similar  to  the  way  Air  Force  and  Navy  pilots  conduct  initial  flight 
training  at  Pensacola  Naval  Air  Station.118  By  coordinating  and  consolidating  cyber 
training  requirements,  all  the  service  components,  to  include  Tenth  Fleet,  will  be  able  to 
maximize  the  effectiveness  of  its  cyber  training  program  by  increasing  the  amount  of 
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personnel  who  can  be  trained  while  enhancing  its  organic  training  curriculum  to  meet 
current  and  future  challenges.  Additionally,  efforts  must  include  partnerships  with 
civilian  experts  in  other  government  enterprises  (such  as  DHS),  academia  and  industry 
to  strengthen  and  develop  the  needed  expertise  to  ensure  our  cyberspace  security.119 
Cyber  fellowships  and  internships  within  DoD  and  across  government  agencies  will 
facilitate  exchanges  and  ensure  that  cyber  warriors  are  speaking  with  each  other  and 
gaining  the  much  needed  expertise  to  bring  back  to  their  parent  organizations.  Lastly, 
but  probably  the  most  important  point,  Tenth  Fleet  needs  to  ensure  that  every  officer, 
sailor,  Department  of  the  Navy  civilian  and  contractor  understands  the  importance  of  the 
cyber  mission.  This  entails  inculcating  into  each  person  a  sense  of  personal 
accountability  regarding  the  importance  to  safeguard  and  secure  our  networks.  The 
success  and  failure  of  our  IA  program  relies  ultimately  on  every  individual  strictly 
adhering  to  prescribed  guidelines  which  outline  the  proper  use  of  DoD  and  commercial 
computers,  flash  memory  drives,  e-mail  usage,  wireless  networks,  cellular  phones,  land¬ 
line  phones,  Blackberries,  satellite  and  cable-based  networks,  and  so  forth.  It  is  no 
longer  adequate  or  sufficient  for  an  annual  online  IA  awareness  training  to  prepare  our 
Navy  personnel  for  the  cyber  threat,  which  is  present  and  growing.  The  Navy  must  take 
the  time  and  effort  to  properly  and  effectively  indoctrinate,  train,  inspect  and  hold 
accountable  all  Navy  personnel  regarding  the  established  IA  guidelines  and  policies. 
With  the  alignment  of  the  OPNAV  N2/N6  staff  into  a  robust  Information  Dominance 
Corps,  there  are  many  skilled  information  professionals  to  augment  the  Tenth  Fleet 
mission  as  needed.120  Tenth  Fleet  will  need  to  utilize  this  information  dominance  cadre 
as  it  will  take  an  “all  hands”  effort  to  ensure  an  effective  IA  program  fully  supports  the 
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cyber  effort  now  and  in  the  future  for  the  roughly  390,000  active  duty  and  reserve  sailors 
which  comprise  the  Navy.121 

Develop  Robust  Exercises  and  Training.  Tenth  Fleet,  via  its  TYCOM  and 
regional  NIOCs,  should  develop  combined  response  exercises,  drills  and  training 
scenarios  with  sister  military  components  and  civilian  agencies  to  better  respond  to 
cyber  attacks.122  Robust  cyber  attacks,  as  delineated  in  Appendix  B,  that  encompass  a 
wide  range  of  complexity  need  to  be  incorporated  into  battle  exercises  preparing  our 
forces  to  deploy.  These  exercises  need  to  mature  with  complexity  in  the  same  manner 
that  our  anti-surface,  anti-submarine  and  anti-aircraft  exercises  are  developed  and 
executed  across  the  inter-deployment  training  schedule.  Our  naval  personnel  assigned 
to  ships,  submarines,  aircraft  and  special  forces  need  to  understand  the  ramifications  of 
operating  in  an  environment  in  which  unfettered  access  to  the  cyberspace  domain  can 
be  compromised  or  denied.  This  means  that  Tenth  Fleet  needs  to  coordinate  closely 
with  each  of  the  numbered  fleets  and  corroborate  with  its  sister  services  components  to 
support  joint,  NATO,  coalition  and  Combatant  Command  exercise  requirements. 
Fortunately,  Tenth  Fleet  can  utilize  its  Information  Dominance  Corps  counterparts  that 
are  currently  assigned  to  each  subordinate  command,  fleet/squadron,  ship  and 
submarine.  The  Navy’s  best  interest,  as  well  as  that  of  the  nation,  requires 
implementing  the  most  realistic  scenarios  in  the  training  environment. 

Enhance  Partnerships  and  Alliances  with  Other  Agencies.  Tenth  Fleet  cannot 
succeed  in  its  mission  to  defend,  exploit  and  achieve  operational  effects  in  and  through 
cyberspace  and  to  assure  freedom  of  maneuver  in  cyberspace  if  it  works  in  isolation.123 
Under  the  latest  Ouadrennial  Defense  Review,  Defense  Secretary  Gates  stipulated: 
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DoD  needs  to  collaborate  with  other  U.S.  departments  and  agencies  and 
international  partners  both  to  support  their  efforts  and  to  ensure  our  ability 
to  operate  in  cyberspace.  This  mutual  assistance  includes  information 
sharing,  support  for  law  enforcement,  defense  support  to  civil  authorities, 
and  homeland  defense.124 

As  highlighted  in  the  CNCI,  NSSC,  NMS-CO,  and  HSPD-7,  responsibility  for  a  federal 
cyber  incident  is  dispersed  across  many  federal  departments  and  agencies  because  of 
the  existing  legal  distinctions  between  national  security  and  other  federal  networks.125 
There  currently  isn’t  legislation  which  requires  cyber  cooperation  and  information 
sharing  between  military  and  non-military  agencies  in  the  government;  however,  this  by 
no  means  should  prevent  or  limit  Tenth  Fleet  from  taking  pro-active  measures  to 
enhance  its  ability  to  coordinate  and  cooperate  with  all  entities  directed  to  defend  the 
GIG,  be  they  operating  under  guidelines  established  by  the  NSSC  or  NMS-CO.126 
Simply  put,  Tenth  Fleet  needs  to  take  steps  to  make  certain  that  its  subordinate 
commands  are  talking  with  their  sister  organizations  in  the  Army,  Air  Force  and  Marine 
Corps.  It  must  further  ensure  that  close  coordination  and  cooperation  across  DHS  is 
taking  place  and  that  information  sharing  is  as  seamless  as  possible. 

Although  DHS  is  responsible  for  protecting  the  government  and  civilian  networks, 
it  will  likely  fall  onto  DoD  to  respond  to  any  such  attack,  particularly  an  attack  aimed  at 
our  critical  infrastructure.  This  means  that  cyber  entities  within  DHS  and  DoD  need  to 
clearly  articulate  and  formalize  relationships  so  that  the  U.S.  can  truly  formulate  a  whole 
of  government  approach  to  protect  our  national  interests  in  cyberspace.  Even  more 
important,  particularly  with  the  global  presence  of  today’s  Navy  and  the  large  number  of 
bases  on  foreign  shores,  the  Navy  must  ensure  it  is  actively  pursuing  increased 
collaboration  and  coordination  with  our  allies  and  coalition  partners.  The  Cooperative 
Defence  Cyber  Centre  of  Excellence  in  Tallinn,  Estonia  is  one  example  of  an 
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international  effort  that  was  developed  to  enhance  NATO’s  cyber  defense  capability  and 
includes  Estonia,  Latvia,  Lithuania,  Germany,  Italy,  the  Slovak  Republic,  and  Spain  as 
Sponsoring  Nations.127  Fleet  Cyber  Command/Tenth  Fleet  should  be  very  familiar  with 
ongoing  efforts  at  NATO  and  vice  versa  to  capitalize  and  leverage  resources  expended 
to  continually  increase  its  understanding  and  comprehension  of  the  latest  developments 
in  the  cyber  domain.  Furthermore,  there  needs  to  be  a  mechanism  by  which  best 
practices  and  policies  can  be  leveraged  and  shared  across  the  government  in  a  timely 
manner  to  mitigate  the  threat  to  our  networks.  We  simply  cannot  afford  to  wait  for  a 
cataclysmic  cyber  event  to  force  government  agencies  to  cooperate;  the  time  for  action 
is  now. 

Conclusion 

Tenth  Fleet  is  being  stood  up  at  an  opportune  time  to  confront  the  ever-growing 
cyber  threats  facing  the  nation.  While  Congress  continues  to  debate  and  delay 
confirmation  hearings  for  the  Commander,  U.S.  Cyber  Command,  Tenth  Fleet  must 
continue  to  lead  the  way  in  developing  and  fostering  innovative  solutions  to  secure  the 
Navy’s  cyber  networks.  Just  as  it  did  during  World  War  II,  Tenth  Fleet  has  capitalized 
on  many  of  the  lessons  learned  in  its  battle  to  confront  the  U-boat  threat,  to  include  the 
importance  of  unity  of  effort,  strong  intelligence  and  tight  cohesion  between  civilian 
scientists  and  military  personnel.  The  innovative  programs  being  undertaken  with 
academia,  civilian  agencies,  industry,  allies  and  partners  need  to  be  expanded  and 
leveraged  with  programs  by  sister  service  components  and  DHS  in  order  to  apply  a  truly 
whole  of  government  approach  that  is  dedicated  to  protecting  the  U.S.  from  cyber 
attack.  The  Navy  must  continue  to  lead  from  the  front  with  its  innovative  programs  and 


28 


partnerships  and  must  expand  its  efforts  to  ensure  we  leverage  the  efforts  being 
undertaken  by  allies  and  coalition  partners. 

Tenth  Fleet  needs  to  ensure  that  lessons  learned,  best  practices  and  advances 
in  firewalls  and  forensics  technology  be  developed  and  shared  a  truly  collaborative 
environment,  because  it  makes  no  sense  for  one  service  to  have  a  secure  network  if  the 
rest  of  the  DoD  or  DHS  is  vulnerable  because  of  a  failure  to  talk  to  each  other.  The 
U.S.  Navy  has  taken  the  appropriate  steps  to  counter  the  cyber  threat  with  its 
development  of  the  Information  Dominance  Corps  and  reconstitution  of  Tenth  Fleet. 

The  difficult  task  ahead  will  be  to  develop  the  synergy  needed  to  operate  in  a  truly 
collaborative,  joint  enterprise  environment  across  not  only  DoD  and  DHS,  but  with  allies 
and  coalition  partners,  if  we  are  to  protect  the  GIG  from  the  growing  cyber  threat. 
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